Sub-processors
Last updated: February 2026
Overview
IncidentFox uses the following sub-processors to deliver our service. We carefully select partners that meet our security and privacy standards.
Current Sub-processors
| Sub-processor | Purpose | Data Processed | Location |
|---|---|---|---|
|
|
AI/LLM provider (Claude) for incident investigation | Slack messages, investigation context | United States |
|
|
Cloud infrastructure hosting (EKS, RDS) | All customer data | United States (us-east-1) |
|
|
Authentication and messaging platform | Workspace info, user IDs | United States |
Note: User-connected integrations (Datadog, PagerDuty, Coralogix, Sentry, Grafana, GitHub, etc.) are not sub-processors. These are connected directly by customers, and IncidentFox queries them on behalf of the user during investigations.
Data Processing Details
Here's how your data flows through our sub-processors:
-
Slack: IncidentFox authenticates via Slack OAuth and receives messages through Slack's Events API. No data is stored by Slack beyond their standard message retention.
-
AWS: All IncidentFox infrastructure runs on AWS. Investigation data, Slack message indices, and metadata are stored in encrypted RDS databases and S3 buckets in the us-east-1 region.
-
Anthropic: Investigation context (logs, metrics, Slack messages) is sent to Anthropic's Claude API for analysis. Anthropic does not use API data for model training and retains data only for abuse monitoring (per their policy).
Security & Compliance
All sub-processors are selected based on:
- SOC 2 Type II compliance (or equivalent security certifications)
- Encryption at rest and in transit (AES-256, TLS 1.2+)
- GDPR and data protection compliance
- Data Processing Agreements (DPAs) in place
Updates to Sub-processors
We will update this page when sub-processors are added, removed, or changed. To stay informed:
Subscribe to changes: Email privacy@incidentfox.ai to receive notifications when this page is updated.
We will provide at least 30 days notice before adding new sub-processors that process customer data.
Questions?
For questions about our sub-processors or data processing practices: